Stocks, ETFs, crypto, bonds, precious metals, and cash across every account and currency, in one privacy-first dashboard: Ghostfolio is open-source wealth management software. The deliberate design decision is no brokerage linking: positions enter by manual entry, CSV import, or the REST API, so your holdings never pass through a data aggregator. Performance is measured as return on average investment across Today, WTD, MTD, YTD, 1Y, 5Y, and Max timeframes, with benchmark comparison against indices like the S&P 500, dividend tracking, and allocation breakdowns by asset class, region, and sector. A static X-ray analysis flags concentration and other portfolio risks, and a FIRE calculator projects progress toward financial independence. Multi-currency support converts holdings using historical exchange rates, market data comes from Yahoo Finance and CoinGecko among other pluggable providers, and everything exports back out as CSV or JSON. Built with Angular and NestJS on PostgreSQL and Redis, shipped as Docker images for amd64 and ARM, with a mobile-first PWA interface, dark mode, and a distraction-free Zen mode. AGPL-licensed.

Grammar, punctuation, and style errors a dictionary lookup can't see: LanguageTool is open-source proofreading powered by a Java rule engine covering English, German, Spanish, French, Portuguese, Dutch, and 25+ other languages. Self-hosting the HTTP server is how you get Grammarly-class checking without sending every sentence you write to a third party - a real concern when the text being proofread is confidential email, legal drafts, or unreleased documentation. Your instance exposes the standard /v2/check API, so the official ecosystem plugs straight in: browser extensions for Chrome and Firefox accept a custom server URL, and integrations exist for VS Code, LibreOffice, Obsidian, Vim, Emacs, and many editors. Notably, self-hosting restores free browser-extension checking that the hosted service moved behind a premium subscription - your server, no character limits, no paywall. Detection quality is tunable: optional n-gram datasets (multi-gigabyte language models for en, de, es, fr, nl) teach the engine word-order and confusion-pair errors like there/their and brakes/breaks, and a fastText model improves automatic language identification. Everything runs offline once models are downloaded. The core is LGPL, the API is documented with Swagger, and rules are community- maintained and constantly expanding.

Birthdays, graduations, house moves, weddings, and the trip you keep promising yourself for next year all belong on the same line, and LifeGLANCE draws that line as one zoomable timeline of your life, past and future. Pan smoothly from a single week out to multiple decades, then zoom back in when a dense year needs room; cluster badges keep crowded stretches readable, and a minimap scrubbar jumps you across decades without endless scrolling. Each milestone carries a title, a date at day, month, or year precision, a category, a note, and a link, and you can attach photos, audio, and video directly to the moments they belong to. Birthdays and anniversaries repeat annually with an end year you set. Switch between All, Past, and Future views, search titles and notes in full text, or open On This Day to see what happened on this date in earlier years. A stats panel and summary modal turn the line into counts and patterns. Import calendar events from an ICS file, export the whole timeline as a high-resolution PNG, or back everything up and restore it as JSON. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Stop pasting your files into ad-riddled online converters and handing strangers copies of your documents: HRConvert2 runs the whole conversion workshop on your own server instead. Drop a file onto the browser page and pick an output format from a catalogue of 488, covering documents, spreadsheets, presentations, ebooks, comics, images, audio, video, subtitles, and archives. Built-in OCR reads scanned PDFs and images and hands back editable text documents you can search and reuse. It converts 3D models and CAD drawings, renders OpenSCAD projects with their multi-file assemblies resolved, and can even build bootable ISO disk images for x86 and ARM machines from ordinary uploads. Live streams are captured and re-encoded straight from .m3u8 playlists, and every uploaded file can be virus-scanned with ClamAV before or after conversion. Finished files go back out through temporary share links that expire on their own, so sending a converted video to a client takes one click. Each visitor works in an isolated scratch space, files delete themselves when they age out, and nobody needs an account, ever. When traffic spikes, the server watches its own CPU and memory, throttles conversions, and spreads storage across disks so it stays upright. Three interfaces, seven color schemes, and 26 languages let each user shape the page to taste, and the whole thing runs happily on a Raspberry Pi with no database at all. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

Every unit of income gets a job in Actual Budget - a local-first personal finance app built on envelope (zero-sum) budgeting, where you can only budget cash you actually have, which keeps the plan honest by construction. The data model is a SQLite file that lives on your device and works fully offline; the self-hosted Node.js sync server adds background multi-device synchronization using CRDT-based distributed-systems machinery, browser and mobile access as an installable web app, and automated backups. Optional end-to-end encryption makes the synced data unreadable even to the server hosting it. Transactions enter three ways: manual entry, file import (CSV, QIF, OFX, QFX, CAMT.053), or automatic bank syncing through GoCardless for EU/UK banks and SimpleFIN for US/Canada. Built-in YNAB4 and nYNAB importers migrate complete budget histories, and reports, schedules for recurring transactions, and rule-based transaction cleanup handle the day-to-day. A fully featured local API lets developers script custom importers and automation against their own data. 100% free, open source, and 26k stars strong.

Security-conscious IT departments pick Passbolt for its cryptography: every user holds an OpenPGP key pair, and shared credentials are encrypted individually to each recipient's public key - real end-to-end encryption, not a vault password handed around. All crypto runs client-side in the mandatory browser extension (distributed and signed through the Chrome and Firefox stores, deliberately separating the crypto code from the server that stores ciphertext); private keys and passphrases never touch your instance, and the server admin cannot read a single secret. Authentication uses the challenge-based GpgAuth protocol, secrets are digitally signed to verify sender integrity, and metadata encryption extends protection to resource names and URLs. Day to day it behaves like a polished commercial manager: auto-fill and auto-save in forms, strong password generation, anti-phishing protection, TOTP storage, folder hierarchies shared per-user or per-group with fine-grained permissions and instant cryptographic revocation. Native iOS, Android, and desktop apps ship alongside a JSON API, CLI, and SDKs for CI/CD secret retrieval and rotation. The PHP server runs on MariaDB and is AGPL-licensed open source - including the paid tiers' codebase - with published security audits.

One article should not require a subscription, an account, and your tracking consent. 13ft is a self-hosted alternative to the defunct 12ft.io that fetches web articles the way a search-engine crawler receives them, then shows you the clean page without paywall walls, ad clutter, and pop-up nonsense attached. Paste a link into the single input, or better, install the companion bookmarklet: one click on any article page rewrites the address to your own server, and the reading copy comes back from infrastructure you control. Because it is yours, there is no third-party service logging every article you read, no central site that can be taken down and strand the habit, and nobody selling a premium tier of unblocking. It handles the stubborn cases with a loading page and multiple fallback retrieval methods that kick in when the first approach fails, ships localised interface strings in several languages, and the whole thing is one small application that runs from a container and sits politely behind a reverse proxy. Casual readers reclaim the occasional long-form piece; researchers and archivists get a reproducible way to fetch the same copy a search index saw. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Alma Relay is the relay you run yourself so your phone can reach the Alma on your desktop from anywhere, without port forwarding, a VPN, or a third party sitting in between. Your desktop dials out to the relay and keeps that connection open, and when you open the app on your phone, its requests travel through the relay to the desktop and the answers stream back the same way. Pairing happens with a QR code that carries the relay address, so switching to your own relay takes one fresh scan instead of manual setup on every device. New pairings encrypt the session end to end, so the relay routes encrypted traffic it cannot read, and the routing values it handles are one-way hashes that are never written to disk or logs. When your phone is locked, the relay can pass along the "reply finished" and "Alma has a question" notifications through Apple's or Google's push services, so you hear about finished work without staring at the screen. A live view of the desktop's browser can ride along too, with short-lived credentials issued for the media connection. Sharing the relay with a team works through per-person tokens you can revoke individually, and regenerating your connect code cuts off every paired phone at once. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Perplexity's search experience without Perplexity: Vane deploys Perplexica, an open-source AI answer engine built as the self-hosted alternative. Instead of returning a page of links, it reads your question, searches the live web through the SearxNG metasearch engine, and composes a direct answer with cited sources. Retrieval quality comes from embeddings and similarity search: fetched pages are re-ranked against the query so the model answers from the most relevant passages rather than whatever ranked first. Two query modes cover different needs - Normal mode runs a straightforward web search, while Copilot mode generates multiple reformulated queries and actively pulls content from top matches for harder questions. Focus modes specialize retrieval for academic papers, YouTube, Reddit discussions, Wolfram Alpha calculations, or the general web. The answering model is your choice: OpenAI-compatible APIs or fully local LLMs such as Llama 3 and Mixtral through Ollama, which keeps queries entirely on your infrastructure. Because SearxNG pulls live results, answers reflect current information, and no search history is tracked.

Log a date, amount, and category; get a clean monthly pie chart and a cashflow strip showing income, expenses, and net balance - ExpenseOwl is expense tracking stripped to what actually matters. The MIT-licensed Go application deliberately is not a budgeting system - no envelopes, no accounts, no double-entry, no bank sync - because its author found tools like Firefly III and Actual too heavy for the simple question "where did this month's money go?" The dashboard makes that question fast: click a pie slice to exclude fixed costs like rent and see discretionary spending clearly, then drill into a chronological table view to inspect or delete individual transactions. Recurring transactions handle salaries and subscriptions automatically, optional tags add a second classification axis, and settings cover custom categories, currency symbol, and a configurable month start date for non-calendar pay cycles. CSV import migrates data from virtually any other tool, and CSV export keeps your data portable. It ships as a self-contained binary and multi-architecture Docker image with zero internet interaction, stores data in flat JSON files by default (PostgreSQL optional), and installs as a PWA on phones. Single-user by design; pair it with an authenticating reverse proxy if exposed publicly.

Built as a direct rejection of the adtech model, Plausible is the best-known privacy-first web analytics tool - lightweight, cookie-free, and open-source. It sets no cookies and stores no personal data: unique visitors are counted via a hash of IP plus User-Agent that rotates every 24 hours and is never stored raw, so no consent banner is required and GDPR compliance is structural rather than contractual. The tracking script is under 1 KB - orders of magnitude lighter than GA - and the dashboard is a deliberate contrast to GA4's sprawl: one fast-loading page with visitors, sources, top pages, countries, devices, and UTM breakdowns, filterable by any dimension. Custom events and goals track signups and clicks, Google Search Console integration pulls in search queries, scheduled email reports keep stakeholders updated, and the Stats API (v2) plus CSV export feed data anywhere. This is the AGPL-licensed Community Edition, the same Elixir codebase that powers Plausible's cloud service, running as three containers: the web app, PostgreSQL for accounts, and ClickHouse for event storage - which means self-hosters get direct SQL access to raw analytics data the cloud version never exposes. Traffic data stays entirely on your server, with no visitor caps or per-pageview pricing.

Your router calls it "Unknown device" at 192.168.1.23; Vedetta calls it the kitchen light and shows its work. Vedetta is a Home Assistant app that scans your local network, identifies what each device actually is, and explains every identification. One scan lists every device it can find with presence and latency history, in tile or list view, light or dark, on a computer or a phone. Behind each name sits the recognition engine: it weighs many weak clues together, counts a repeated fact once, groups devices by family, and shows certainty honestly, keeping anything doubtful in Other rather than inventing a label. Tap the info marker beside a name, brand, or type and a pop-up lists every clue, its weight, and the hypotheses that were rejected. Names or rooms you set by hand are never overwritten by later scans, and sleeping phones are remembered instead of flickering in and out. Choose from three search levels depending on how hard you want it to probe, let the nightly deep search refresh the picture, and use the network doctor to spot duplicate addresses, repeated restarts, devices that drop together, or a slowing gateway. It can also publish what you choose to Home Assistant and MQTT, display devices from other networks your Home Assistant already sees, and mask exports before they leave the machine. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Numa is a DNS resolver you run yourself that gives every service on your network a real name, blocks ads and trackers before they load, and keeps your queries private with encrypted DNS. Register a frontend on port 5173 once, and https://frontend.numa opens in your browser with a valid certificate and WebSocket passthrough, no mkcert, no nginx, no editing hosts files. Path-based rules send app.numa/api to a backend on another port, so multi-service projects get one clean address instead of a spreadsheet of port numbers. Tracker and ad domains die at resolution time through the Hagezi Pro blocklist, refreshed daily, and every device that points its DNS at your instance inherits the filtering. Temporary overrides redirect any hostname for testing or debugging and revert on their own, and scripts can create them through the REST API. You choose how answers are found: forward to your existing DNS, resolve recursively from the root servers, or seal queries with Oblivious DNS over HTTPS so no single party sees both your address and your question. Phones and laptops connect over DNS-over-TLS on port 853, a QR-code flow points an iPhone at your resolver in minutes, and mDNS discovery lets one machine reach services registered on another. The dashboard on port 5380 manages services, overrides, and diagnostics, with token sign-in away from loopback. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

In-app, website, link, and email surveys feed one open-source experience management platform: Formbricks. Its distinguishing strength is targeted in-app research: a JavaScript SDK triggers surveys on user events and attributes, with segmentation rules like "power users who have not seen a survey in 10 days," so questions reach the right cohort at the right moment instead of a mass email blast. The no-code editor offers 20+ question types including NPS, CSAT, CES, matrix, ranking, and file upload, with skip logic, conditional branching, best-practice templates, and full brand theming. Responses feed built-in analytics with summaries and CSV/JSON export, and integrations push data to Slack, Notion, Google Sheets, Airtable, Zapier, and n8n, with webhooks and an open API on every tier. Because self-hosted surveys load from your own domain rather than a blacklisted third-party script host, ad blockers do not suppress them - in-app surveys reach users that Hotjar-style tools silently miss, which measurably raises response rates. Self-hosting also removes the third-party sub-processor from your privacy policy entirely: survey responses often contain PII, and keeping them on your own server matters for GDPR-sensitive and regulated industries. The Community Edition has no response caps or tier-gated features, so core functionality and your data stay accessible regardless of any subscription. Next.js on PostgreSQL, AGPLv3.

On your own server, TypeType runs a private video platform for YouTube, NicoNico, and BiliBili, keeping subscriptions, history, and playlists out of someone else's recommendation engine. Pick a service and search it. Browse channels, Shorts, podcasts, and a home feed. Speed and quality control. Cinema mode. Native picture-in-picture. Subtitles, alternate audio tracks, and frame-by-frame stepping. SponsorBlock segments get skipped, or just marked, by category. Subscriptions, playlists, watch later, favorites, and resume positions fill the library. Import a Google Takeout export or a PipePipe backup and a new instance never starts empty. Download video or audio to local or S3-compatible storage and collect it in the browser when it is ready. Sign in locally or through OIDC. An admin console runs the instance. Block a channel and it disappears from feeds, search, and related videos. Hide Shorts. Hide personalized recommendations. Hide the suggestions column. A native Android client for phones and tablets syncs with the same instance. An optional experimental recommender can build a personalized home feed, and each user chooses whether to turn it on. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. MIT licensed.

Some messages should only arrive if you cannot send them yourself, and Aeterna is a self-hosted dead man's switch that makes sure they do. You write the messages, attach the files that matter, name the people who should receive them, and check in on a rhythm you choose. Keep checking in and nothing happens. Stop, and Aeterna delivers what you left behind. Each switch pairs your words with documents, photos, or instructions for specific recipients, and switches can address multiple recipients so one message can reach a partner, a sibling, and a lawyer at the same time. File attachments are stored encrypted and are automatically deleted from the server right after delivery, so sensitive material does not linger once it has done its job. Check-ins take seconds through the web interface or a quick link in your email, which keeps the heartbeat habit painless. When a switch fires it can also call webhooks, triggering home automation or custom scripts alongside the emails. Your SMTP settings live in the settings screen with live testing, and reverse proxy templates for Nginx, Traefik, and Caddy help you put the service behind your own domain with proper certificates. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. GPL-3.0 licensed.

SilentSuite is an end-to-end encrypted sync service for your calendar, contacts, and tasks, where the server stores only ciphertext and cannot read a single event, name, or plan. Encryption happens on your devices with keys derived locally, so record contents are sealed before upload and opened only on another trusted device of yours. Manage everything in the web app, sync a phone through the Android adapter's system calendar, contacts, and task providers, or connect desktop apps like Thunderbird and GNOME Calendar through the local Bridge. The Bridge speaks CalDAV and CardDAV only on localhost, then forwards encrypted records upstream, so standard desktop clients work without ever exposing plaintext to the server. Import and export keep exit paths open, and because sync rides the open Etebase protocol, your data model stays inspectable rather than locked into a proprietary format. Self-hosting unlocks every feature at no cost: one Compose file starts the sync server and PostgreSQL, with open registration you can close after your own account exists, nightly backup tooling, and Umbrel packaging. Signing up hosted users is not required at all; the same web app, Android adapter, and Bridge run against your own server with your domain. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.

DashBeam sends files and folders of any size straight from one device to another, end to end encrypted, with no cloud account, no size limits, and nothing parked on a third party server in between. Drop in a file and share it through a short code, a link, or a QR scan; whoever receives it needs no account and can collect it in a plain browser tab with nothing installed. On the same network, nearby machines appear on their own, so pairing two devices and sending between them takes a couple of clicks instead of a cable or a memory stick. Pair a device once and it stays reachable by its identity, so your machines can exchange files from anywhere without swapping fresh tickets every time. Interrupted transfers resume where they stopped, and hopping from Wi-Fi to cellular mid-send does not drop the connection. One share can fan out to several receivers at once, and devices you mark as trusted can accept files automatically, which suits pushing builds, media libraries, or backups around a small fleet. You can preview what is arriving before downloading it, and a local history records every completed transfer. The repository also ships Docker Compose stacks for your own relay and discovery server, so even the encrypted fallback path can run entirely on machines you own. Running on a dedicated VPS on RepoCloud with guaranteed CPU, RAM, and SSD, full root SSH access, and a browser serial console. AGPL-3.0 licensed.